> ## Documentation Index
> Fetch the complete documentation index at: https://veridical-dev.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# API overview

> Durable, workspace-scoped control-plane contracts

The REST API exposes identity, workspaces, repositories, reviews and evidence,
findings and fixes, scans and schedules, policies, usage, audit, integrations,
OAuth, and admin governance.

The generated pages in this section come from the committed OpenAPI 3.1 schema.
Clients should:

* authenticate every product request;
* send stable idempotency keys for retryable mutations;
* preserve correlation IDs;
* treat `cannot_run` and abstention as first-class outcomes;
* page or bound audit and list requests;
* never infer workspace access from identifier shape.

Forge webhook endpoints are provider-authenticated ingress and are not called
with the product bearer token.